[VCB] Role permissions for backup and restore VM

[Gael]

Hi,

I'm using VCB to backup restore VMs.

I need to delegate autorisation to another users to manage backup and restore. But i wouldn't like to give them admin right, just permissions to backup, and restore on existing VM or not.

I know permissions related to backup (http://www.vmware.com/pdf/vsphere4/r40/vsp_vcb_15_u1_admin_guide.pdf) but any information about requirement about restore.

I've found on another post (http://communities.vmware.com/message/1439438) where dan_white has post an excel with lot of permissions but it doesn't work ...

Permissions set to vcbuser role (base on Excel):

- Datastore.Allocate space

- Datastore.Browse Datastore

- Datastore.Low level file operations

- Datastore.remove file

- Folder.Create folder

- Folder.Move folder

- Folder.Rename folder

- Global.Cancel task

- Network.Assign network

- Resource.Assign virtual machine to resource pool

- Resource.Migrate

- Resource.Relocate

- Task.*

- Virtual Machine.Configuration.Add New Disk

- Virtual Machine.Configuration.Advanced

- Virtual Machine.Configuration.Change CPU count

- Virtual Machine.Configuration.change resource

- Virtual Machine.Configuration.disk lease

- Virtual Machine.Configuration.extend virtual disk

- Virtual Machine.Configuration.host USB device

- Virtual Machine.Configuration.memory

- Virtual Machine.Configuration.rename

- Virtual Machine.Configuration.settings

- Virtual Machine.Inventory.create from existing

- Virtual Machine.Inventory.create new

- Virtual Machine.Inventory.move

- Virtual Machine.Inventory.register

- Virtual Machine.Inventory.remove

- Virtual Machine.Provisionning.Allow disk access

- Virtual Machine.Provisionning.allow read-only disk access

- Virtual Machine.Provisionning.allow virtual machine download

- Virtual Machine.Provisionning.allow virtual machine files upload

- Virtual Machine.Provisionning.customize

- Virtual Machine.State.create snapshot

- Virtual Machine.State.Remove snapshot

Last log lines are :

[2012-06-02 14:46:54.901 F2DD16D0 trivia 'vmomi.soapStub[0]'] Received soap response from [TCP:ssc2pin3vctrw1:443]: GetConfig

[2012-06-02 14:46:54.903 F2DD16D0 verbose 'vcbRestore'] Found a device: vim.vm.device.VirtualIDEController

[2012-06-02 14:46:54.903 F2DD16D0 verbose 'vcbRestore'] Found a device: vim.vm.device.VirtualIDEController

[2012-06-02 14:46:54.903 F2DD16D0 verbose 'vcbRestore'] Found a device: vim.vm.device.VirtualPS2Controller

[2012-06-02 14:46:54.903 F2DD16D0 verbose 'vcbRestore'] Found a device: vim.vm.device.VirtualPCIController

[2012-06-02 14:46:54.903 F2DD16D0 verbose 'vcbRestore'] Found a device: vim.vm.device.VirtualSIOController

[2012-06-02 14:46:54.903 F2DD16D0 verbose 'vcbRestore'] Found a device: vim.vm.device.VirtualKeyboard

[2012-06-02 14:46:54.903 F2DD16D0 verbose 'vcbRestore'] Found a device: vim.vm.device.VirtualPointingDevice

[2012-06-02 14:46:54.904 F2DD16D0 verbose 'vcbRestore'] Found a device: vim.vm.device.VirtualVideoCard

[2012-06-02 14:46:54.904 F2DD16D0 verbose 'vcbRestore'] Found a device: vim.vm.device.VirtualLsiLogicController

[2012-06-02 14:46:54.904 F2DD16D0 verbose 'vcbRestore'] Found a device: vim.vm.device.VirtualDisk

[2012-06-02 14:46:54.904 F2DD16D0 verbose 'vcbRestore'] Found a device: vim.vm.device.VirtualDisk

[2012-06-02 14:46:54.904 F2DD16D0 verbose 'vcbRestore'] Found a device: vim.vm.device.VirtualCdrom

[2012-06-02 14:46:54.904 F2DD16D0 verbose 'vcbRestore'] Found a device: vim.vm.device.VirtualPCNet32

[2012-06-02 14:46:54.904 F2DD16D0 verbose 'vcbRestore'] Found a device: vim.vm.device.VirtualFloppy

[2012-06-02 14:46:54.904 F2DD16D0 trivia 'vmomi.soapStub[0]'] Sending soap request to [TCP:ssc2pin3vctrw1:443]: reconfigure {}

[2012-06-02 14:46:54.904 F2DD16D0 trivia 'vmomi.soapStub[0]'] Request started [N7Vmacore4Http13UserAgentImpl22AsyncSendRequestHelperE:0x59e2d440]

[2012-06-02 14:46:54.907 F2D6DB90 trivia 'vmomi.soapStub[0]'] Request completed [N7Vmacore4Http13UserAgentImpl22AsyncSendRequestHelperE:0x59e2d440]

[2012-06-02 14:46:54.907 F2DD16D0 error 'vcbRestore'] Error: No permission to perform this action.

[2012-06-02 14:46:54.907 F2DD16D0 trivia 'vmomi.soapStub[0]'] Sending soap request to [TCP:ssc2pin3vctrw1:443]: unregister {}

[2012-06-02 14:46:54.907 F2DD16D0 trivia 'vmomi.soapStub[0]'] Request started [N7Vmacore4Http13UserAgentImpl22AsyncSendRequestHelperE:0x59e2d440]

[2012-06-02 14:46:54.909 F2909B90 trivia 'vmomi.soapStub[0]'] Request completed [N7Vmacore4Http13UserAgentImpl22AsyncSendRequestHelperE:0x59e2d440]

terminate called after throwing an instance of 'Vim::Fault::NoPermission::Exception'

  what():  vim.fault.NoPermission

/usr/sbin/vcbRestore: line 94: 28354 Aborted                 (core dumped) LD_LIBRARY_PATH=:/usr/lib/vmware/vmacore:/usr/lib/vmware/vcb VCB_PASSWORD="$PASSWORD" /usr/lib/vmware/vcb/vcbRestore -h "$VCHOST" -u "$USERNAME" -s "$legacy_dir" -L "6" --

Thanks for your help

[marcelo_soares]

Teste providing all permissions from "Virtual Machine power user" plus:

- Datastore.Allocate space

- Datastore.Browse Datastore

- Datastore.Low level file operations

- Datastore.remove file

- Folder.Create folder

- Folder.Move folder

- Folder.Rename folder

- Global.Cancel task

- Network.Assign network

- Resource.Assign virtual machine to resource pool

- Resource.Migrate

- Resource.Relocate

- Task.*

[Gael]

Final solution was to set permission as :

Category	Item
Datastore	Allocate space
Datastore	Browse datastore
Datastore	Low level file operations
Datastore	Remove file
Folder	Create folder
Folder	Rename folder
Folder	Move folder
Global	Cancel task
Network	Assign network
Resource	Assign virtual machine to resource pool
Resource	Assign VApp to resource pool
Resource	Migrate
Resource	Relocate
Scheduled task	Create tasks
Scheduled task	Modify task
Scheduled task	Remove task
Scheduled task	Run task
Task	Create task
Task	Update task
VirtualMachine.Config	Add existing disk
VirtualMachine.Config	Add new disk
VirtualMachine.Config	Add or remove device
VirtualMachine.Config	Advanced
VirtualMachine.Config	Change CPU count
VirtualMachine.Config	Change resource
VirtualMachine.Config	Disk lease
VirtualMachine.Config	Memory
VirtualMachine.Config	Modify device settins
VirtualMachine.Config	Remove disk
VirtualMachine.Config	Rename folder
VirtualMachine.Config	Reset guest information
VirtualMachine.Config	Settings
VirtualMachine.Config	Upgrade virtual hardware
VirtualMachine.Interact	Power On
VirtualMachine.Interact	Device connection
VirtualMachine.Interact	Acquire guest control ticket
VirtualMachine.Interact	Answer question
VirtualMachine.Interact	Configure CD media
VirtualMachine.Interact	Configure floppy media
VirtualMachine.Interact	Console interaction
VirtualMachine.Interact	Device connection
VirtualMachine.Interact	Power Off
VirtualMachine.Interact	Power On
VirtualMachine.Interact	Reset
VirtualMachine.Interact	Suspend
VirtualMachine.Interact	Vmware Tools install
VirtualMachine.Inventory	Create from existing
VirtualMachine.Inventory	Create new
VirtualMachine.Inventory	register
VirtualMachine.Inventory	Move
VirtualMachine.Provisioning	Allow disk access
VirtualMachine.Provisioning	Allow read-only disk access
VirtualMachine.Provisioning	Allow virtual machine download
VirtualMachine.Provisioning	Allow virtual machine files upload
VirtualMachine.Provisioning	Customize
VirtualMachine.State	Create snapshot
VirtualMachine.State	Remove Snapshot

Thanks, for your help